Description
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and (2) HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys.
References
- 1241 third-party-advisory
- symantec-firewall-registry-dos(27764) vdb-entry
- http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php
- 18995 vdb-entry
- 20060715 Norton Insufficient protection of Norton service registry keys mailing-list